Configure Packet Capture
While configuring packet capture, remember the following:
-
Packet capture automatically stops after a duration of six hours. During this period, all data captured is saved for analysis or record-keeping.
-
You can store up to 20 packet capture files. If you need to generate new ones, delete some of the existing files first.
-
A maximum of 5 packet capture operations can be in progress simultaneously.
To configure packet capture on a device:
-
Click Monitor > Packet Capture.
The Packet Capture page is displayed.
-
Click Capture Packet.
The Capture Packet page is displayed.
- Enter the details according to the guidelines provided in Table 1.
-
Click Start to start capturing data packets for the selected
device.
A success message is displayed with a Job ID link. Click the Job ID to view the status of the job on the Jobs page.
-
You can view the packet capture file status on the Packet Capture page. Click Stop Packet Capture to cancel the session.
-
After the job is successful, a link to download the packet capture file is displayed on the user interface. Click the Download PCAP File link to download and save the file on your local machine. Open the .pcap file using a network packet analyzer.
Table 1: Capture Packet Parameters Field Description Device
Select the device to capture and analyze the data plane traffic.
Basic Filter
Protocol
Select the protocol to capture the packets.
Interface
Select the logical interface of the device.
Source & Destination Filter
Bidirectional
Enable the toggle switch to collect information, such as traffic from source port to destination port and vice versa.
Source Port
Enter the source port number between 0 through 65535.
Source Prefix
Enter the source IPv4 or IPv6 address prefix.
Destination Port
Enter the destination port number between 0 through 65535.
Destination Prefix
Enter the destination IPv4 or IPv6 address prefix.
Additional Settings
Max File Size
Enter the maximum size of the packet capture file. You can capture from 1 MB to 20 MB of data in a file. The default value is 1 MB.
Max Capture Size
Enter the maximum length of the packet capture file after which it is truncated. You can enter a value between 68 through 10,000 bytes. The default value is 1514 bytes.
Packet Limit
Enter the number of packets that can be captured in a session. You can capture between 10 through 1 million packets in a session. The default value is 100 packets.
-